This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa File: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (raw, json) Hash identifier: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA= Subject key identifier: 3C:A5:A5:E4:BF:8A:7F:FE:BE:B8:B8:E4:2B:72:2B:2E:60:C7:20:9F Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Certificate serial: 019B7F14C8C858F655B48A409F8202FC4752 Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa Signing time: Fri 02 Jan 2026 14:20:27 +0000 ROA not before: Fri 02 Jan 2026 14:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205473 IP address blocks: 185.217.88.0/22 maxlen: 22 185.217.88.0/23 maxlen: 23 185.217.88.0/24 maxlen: 24 185.217.89.0/24 maxlen: 24 185.217.90.0/23 maxlen: 23 185.217.90.0/24 maxlen: 24 185.217.91.0/24 maxlen: 24 2a0b:c640::/32 maxlen: 32 2a0b:c641::/32 maxlen: 32 2a0b:c642::/32 maxlen: 32 2a0b:c643::/32 maxlen: 32 2a0b:c644::/32 maxlen: 32 2a0b:c645::/32 maxlen: 32 2a0b:c646::/32 maxlen: 32 2a0b:c647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c8:c8:58:f6:55:b4:8a:40:9f:82:02:fc:47:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Validity Not Before: Jan 2 14:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ca5a5e4bf8a7ffebeb8b8e42b722b2e60c7209f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:f1:c1:ba:64:b4:7c:b5:36:83:1c:1a:b4: a0:b0:e7:39:9f:5e:3a:e0:e6:7f:e1:8d:04:74:77: c9:e6:65:ef:90:8f:2f:77:56:f1:4c:fb:2a:8e:2d: 20:62:55:01:90:79:01:a7:fd:11:ff:6e:ad:14:8f: 5d:a5:af:81:10:23:99:62:76:d1:76:a0:4c:04:dc: fa:29:0d:c9:b0:a3:08:fc:2c:df:66:e0:75:60:5b: 7b:13:9e:e9:39:58:b6:7a:e5:08:22:60:02:9c:47: 3a:12:a8:cc:ec:8d:38:e5:5e:af:da:15:e9:5e:fc: 25:ac:e0:cb:8c:ed:69:84:3f:1a:f7:b7:fb:89:d8: b9:66:62:45:fb:3c:25:b6:b3:a2:1f:83:de:65:e6: 0a:c2:e4:af:e2:02:72:54:80:7b:0b:90:40:87:a1: 8e:bf:44:00:e0:1f:6e:4c:1f:e1:31:fe:23:8f:26: 15:ab:72:f3:7d:3b:00:58:8d:6c:21:77:4b:47:db: 98:f8:f5:0b:ac:1f:72:50:57:7c:4a:01:c3:11:ec: 7d:f6:09:c7:ea:d4:e7:0f:28:18:ab:6e:63:b4:c7: 7b:ec:1e:f5:43:45:b7:87:4e:81:3c:4c:23:7c:55: f7:fd:fb:b0:ec:64:cb:62:26:f7:b3:d2:cf:6b:2b: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:A5:E4:BF:8A:7F:FE:BE:B8:B8:E4:2B:72:2B:2E:60:C7:20:9F X509v3 Authority Key Identifier: keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.88.0/22 IPv6: 2a0b:c640::/29 Signature Algorithm: sha256WithRSAEncryption 58:93:5b:6f:d0:00:c8:1d:dd:26:9a:e3:3f:c1:59:e8:35:f8: 7c:f5:61:ca:c8:76:f4:4c:fc:71:b1:8a:bb:e8:66:66:9c:16: 8c:53:59:96:37:03:ae:b8:20:64:fc:0f:48:69:53:13:3a:a6: 95:2d:5e:20:67:00:f2:4f:14:1f:f7:8d:01:1b:e4:de:24:cb: 97:bb:d4:77:35:38:8d:b1:d7:86:ce:fb:7e:38:fa:b5:6b:47: 0d:e5:b0:52:b7:38:7e:50:29:53:71:6a:0e:14:74:b8:b9:6d: 14:b8:fd:82:b0:28:d3:d3:b6:bd:00:6b:9b:18:f7:ff:76:21: fd:8c:ea:e1:98:9d:4b:21:be:9c:86:14:a1:fb:98:26:ca:57: f8:44:65:f7:ff:df:8c:a5:62:6a:96:64:05:ce:9b:79:ad:7d: 56:7b:ec:37:c1:85:61:02:56:e4:f5:f7:89:07:3c:6e:e1:a8: 85:97:44:92:c2:bd:36:c7:2a:fd:6a:52:33:cf:4f:1b:3d:79: 54:97:ea:1e:bf:96:fe:82:f0:29:79:f9:c7:14:16:ff:d7:da: 44:27:e3:48:93:ba:f6:77:e5:03:d2:9c:2e:73:cc:22:b7:14: 2d:4a:e3:6e:f0:ed:2c:10:bb:33:72:6e:ac:10:24:63:d2:35: 67:34:65:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FMjIWPZVtIpAn4IC/EdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2 ZGNmMTAwHhcNMjYwMTAyMTQyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2E1YTVlNGJmOGE3ZmZlYmViOGI4ZTQyYjcyMmIyZTYwYzcyMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimXxwbpktHy1NoMcGrSgsOc5n146 4OZ/4Y0EdHfJ5mXvkI8vd1bxTPsqji0gYlUBkHkBp/0R/26tFI9dpa+BECOZYnbR dqBMBNz6KQ3JsKMI/CzfZuB1YFt7E57pOVi2euUIImACnEc6EqjM7I045V6v2hXp XvwlrODLjO1phD8a97f7idi5ZmJF+zwltrOiH4PeZeYKwuSv4gJyVIB7C5BAh6GO v0QA4B9uTB/hMf4jjyYVq3LzfTsAWI1sIXdLR9uY+PULrB9yUFd8SgHDEex99gnH 6tTnDygYq25jtMd77B71Q0W3h06BPEwjfFX3/fuw7GTLYib3s9LPayvXqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDylpeS/in/+vri45CtyKy5gxyCfMB8GA1UdIwQY MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt ODVhOTU1ZjIxNjNiLzEvUEtXbDVMLUtmXzYtdUxqa0szSXJMbURISUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudlYMA0E AgACMAcDBQMqC8ZAMA0GCSqGSIb3DQEBCwUAA4IBAQBYk1tv0ADIHd0mmuM/wVno Nfh89WHKyHb0TPxxsYq76GZmnBaMU1mWNwOuuCBk/A9IaVMTOqaVLV4gZwDyTxQf 940BG+TeJMuXu9R3NTiNsdeGzvt+OPq1a0cN5bBStzh+UClTcWoOFHS4uW0UuP2C sCjT07a9AGubGPf/diH9jOrhmJ1LIb6chhSh+5gmylf4RGX3/9+MpWJqlmQFzpt5 rX1We+w3wYVhAlbk9feJBzxu4aiFl0SSwr02xyr9alIzz08bPXlUl+oev5b+gvAp efnHFBb/19pEJ+NIk7r2d+UD0pwuc8witxQtSuNu8O0sELszcm6sECRj0jVnNGV6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:42 2026 by rpki-client